Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:networkmanager-L2tp_project:networkmanager-L2tp:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Local Privilege Escalation in NetworkManager-l2tp via pppd Directive Injection

An improper input validation vulnerability in NetworkManager-l2tp (CVE-2026-93337) allows local users with VPN creation permissions to inject malicious directives into the pppd configuration, leading to arbitrary code execution as root.

NetworkManager-l2tp privilege-escalation linux cve
1t 1c